summaryrefslogtreecommitdiff
path: root/old/published/Webmonkey/Monkey_Bites/2007/04.02.07/Tue/vistavirus.txt
blob: df21a93c532a534eb00ca9295e78fee1824ffad1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
A particularly nasty Windows Vista security exploit in which attackers can hijack your machine via the animated cursor tools, is expected to be patched sometime today. 

The Security Response Center blog [reports][3] that attacks against the vulnerability have increased over the past weekend and the proof-of-concept code has been released to the public.

In light of the increased attacks Microsoft says it will roll out the update a few days ahead of time -- unless the patch encounters an "issue."

Microsoft says that "it's possible that we will find an issue that will force us to delay the release." If the release is delayed beyond today, customers will be notified via the MSRC blog.

The update was previously scheduled for release as part of the April monthly security update on April 10, but due to the increased risks brought to light by this weekend's attacks, Microsoft has decided to rush out a patch. 

The MSRC blog says that the exploit was reported to the Windows team back in December of last year.

Affected users should keep an eye on the [MSRC blog][2] and we'll be sure to let you know when a link is available.

[3]: http://blogs.technet.com/msrc/archive/2007/04/01/latest-on-security-update-for-microsoft-security-advisory-935423.aspx "Latest on security update for Microsoft Security Advisory 935423"
[2]: http://blogs.technet.com/msrc/ "Microsoft Security Response Center Blog"